List of all possible output fields for Splunk App for CEF

[jcrabb_splunk]

Where can one find a list of all possible output fields for the Splunk App for CEF?

[jcrabb_splunk · Accepted solution]

There is a lookup file located in the app which contains all the output fields. This file is located in:

• $SPLUNK_HOME/etc/apps/splunk_app_cef/lookups/

The file name is cef_inventory.csv.